VRDA Feed by JPCERT/CC
  Vulnerability Response Decision Assistance Feed : Information for vulnerability impact analysis
[ about VRDA Feed | JPCERT/CC



 
Vulnerability Analysis Result (Revision No : 1) [ Download XML
JVNDB-2025-010647     ( CVE-2025-54422 | CVE-2025-54422 )
sandboxie-plus の Sandboxie における重要な情報の平文保存に関する脆弱性
https://jvndb.jvn.jp/ja/contents/2025/JVNDB-2025-010647.html

Original

sandboxie-plus の Sandboxie には、重要な情報の平文保存に関する脆弱性、エンティティ認証のない鍵交換に関する脆弱性、認可されていない制御領域への重要情報の漏えいに関する脆弱性が存在します。

Translation   (Show)





About This Analysis Information
Analysis Information Provider:
JVN iPedia
First Published:
2025-08-05
Source Information Category:
Advisory, Alert
Last Updated:
2025-08-05




Affected Product Tags
cpe:/a:sandboxie-plus:sandboxie
 


Vulnerability Analysis Results
[Access Vector]  [?]
Undefined [?]

Local [?]
Adjacent Network [?]
Network [?]

[Access Complexit]  [?]
Undefined [?]

High [?]
Medium [?]
Low [?]

[Authentication]  [?]
Undefined [?]

Multiple [?]
Single [?]
None [?]

[Confidentiality Impact]  [?]
Undefined [?]

None [?]
Partial [?]
Complete [?]

[Integrity Impact]  [?]
Undefined [?]

None [?]
Partial [?]
Complete [?]

[Availability Impact]  [?]
Undefined [?]

None [?]
Partial [?]
Complete [?]

Alternatives
Common Vulnerabilities and Exposures (CVE) CVE-2025-54422




National Vulnerability Database (NVD) CVE-2025-54422








References
JVNDB CWE-522 認証情報の不十分な保護




JVNDB CWE-322 エンティティ認証のない鍵交換




JVNDB CWE-312 重要な情報の平文保存




JVNDB CWE-497 認可されていない制御領域への重要情報の漏えい




関連文書 github.com (v1.16.2)




関連文書 github.com (GHSA-jp7r-vgv9-43p7)




関連文書 github.com (d107d5743880da28e782c1771b5246b2a512989a)





Copyright © 2025 JPCERT/CC All Rights Reserved.